What changed when agents got a wallet

Until now an AI agent could draft the order but a human pressed buy. The arrangement between OpenAI and Visa removes that step: agents can purchase on a user's behalf, with a set of rules meant to keep the spending in bounds. It is a small product change with a large consequence. The agent crossed from advising to acting, and acting with money is a different thing entirely.

An assistant that gives a wrong answer creates a bad decision. An agent that makes a wrong purchase creates a transaction, a refund, a chargeback, and a question of who authorized it. The capability is genuinely useful. The point most coverage skips is that it relocates the risk from the screen to the bank account.

The questions a wallet forces

Three questions move to the front the moment an agent can pay. What is it allowed to spend, and against whose limit. How is each purchase authorized, and can that authorization be forged or coerced through a manipulated instruction. And when a charge is wrong, who carries it: the user, the platform, or the business whose agent made the call. None of these has a settled answer yet.

For a company, this is the agent governance gap with a price tag attached. Deploying an agent without sign-off was already a quiet liability. Deploying one that can move money without strict limits, logging, and a clear line of accountability turns that liability into a number on a statement.

How to adopt this without getting burned

The opportunity is real, so the answer is not to ban transacting agents. It is to treat spending authority the way a serious company treats any other delegated authority: with explicit limits, full audit trails, and a named owner. An agent should have a budget, a scope, and a record of every action, exactly as a junior employee with a corporate card would.

Set those controls before the rails are live, not after a disputed charge forces a scramble. The firms that adopt agentic payments well will be the ones that decided the guardrails first. The capability arrived this week. The control is the part you have to build.

Read next: The Works Council Can Veto Your AI  ·  Shadow AI Is Your Next Data Breach